differential-review

Automate security code reviews by running differential analysis on git changesets to identify vulnerabilities and prevent security regressions. The review calculates blast radius, checks test coverage, and generates comprehensive markdown reports with evidence and recommendations.

Differential analysis in code review is a security-focused method that examines code changes rather than the entire repository. It leverages git history for context, prioritizes security-critical areas like authentication and cryptography, and classifies changes by risk level to detect potential regressions.

Yes, you can use this security review on large codebases because it features adaptive depth. The analysis automatically adjusts its depth based on codebase size categories (SMALL, MEDIUM, LARGE) to ensure comprehensive vulnerability detection across varying scales.

Check test coverage and blast radius for a pull request by running a security-focused differential review on the changeset. The review process calculates the blast radius of modifications and evaluates existing test coverage to classify changes by risk level.

The best way to prevent security regressions before merging code is to perform an automated differential review on the pull request. This process identifies potential vulnerabilities in security-critical areas like external calls and cryptography, generating a detailed report to address flaws proactively.